Keep the private parts private

Your household notebook stays local.

The browser tool processes and stores the notebook locally. It does not automatically upload the notebook, create accounts, send messages or connect to a calendar. The optional controlled-sharing page separately uploads a reviewed selected-plan file when you publish it.

A full private backup contains all members, commitments, unavailable intervals, notes and proposal history. A selected text handoff contains only selected commitments, their times and recorded responsible names. Review titles and names yourself; the tool cannot identify personal details you put into public text.

Clearing this site’s browser data removes the saved notebook. Downloaded copies remain wherever you stored them. If saved data is unreadable, you can keep its original raw text before confirming replacement.

Optional controlled plan sharing

Published selections contain only reviewed titles, recorded owner names, times and the planning zone. Cloudflare stores these fields and hashed access keys. The service can read the data; it is not end-to-end encrypted. Raw management and viewing keys are kept in link fragments and optional browser recovery storage, not in server URL paths or query strings. Anyone holding a key has its corresponding access. Private notebooks are not uploaded.

Access expires30 days after a publication, replacement or viewer-key rotation. Delete and revoke stop fresh access, not copies already kept by viewers. Expired rows are removed during later creation cleanup; a maximum of50 rows bounds this preview. Cloudflare D1 recovery may retain earlier data for up to 30 days on the current paid account. Clearing browser data removes local management recovery, not an already published plan. Keep the management link to delete it; otherwise access expires.

Cloudflare serves this public website and receives ordinary connection information. Product code has no analytics or advertising scripts. External comparison links use their own policies.